⚠ Archived content — this site is no longer maintained.   Current WebKit documentation is at docs.webkit.org.

Changeset 250264 in webkit


Ignore:
Timestamp:
Sep 23, 2019, 4:33:36 PM (7 years ago)
Author:
mark.lam@apple.com
Message:

Lazy JSGlobalObject property materialization should not use putDirectWithoutTransition.
https://bugs.webkit.org/show_bug.cgi?id=202122
<rdar://problem/55535249>

Reviewed by Yusuke Suzuki.

JSTests:

  • stress/lazy-global-object-property-materialization-should-not-putDirectWithoutTransition.js: Added.

Source/JavaScriptCore:

  • runtime/JSGlobalObject.cpp:

(JSC::JSGlobalObject::init):

Location:
trunk
Files:
1 added
3 edited

Legend:

Unmodified
Added
Removed
  • trunk/JSTests/ChangeLog

    r250250 r250264  
     12019-09-23  Mark Lam  <mark.lam@apple.com>
     2
     3        Lazy JSGlobalObject property materialization should not use putDirectWithoutTransition.
     4        https://bugs.webkit.org/show_bug.cgi?id=202122
     5        <rdar://problem/55535249>
     6
     7        Reviewed by Yusuke Suzuki.
     8
     9        * stress/lazy-global-object-property-materialization-should-not-putDirectWithoutTransition.js: Added.
     10
    1112019-09-23  Caio Lima  <ticaiolima@gmail.com>
    212
  • trunk/Source/JavaScriptCore/ChangeLog

    r250262 r250264  
     12019-09-23  Mark Lam  <mark.lam@apple.com>
     2
     3        Lazy JSGlobalObject property materialization should not use putDirectWithoutTransition.
     4        https://bugs.webkit.org/show_bug.cgi?id=202122
     5        <rdar://problem/55535249>
     6
     7        Reviewed by Yusuke Suzuki.
     8
     9        * runtime/JSGlobalObject.cpp:
     10        (JSC::JSGlobalObject::init):
     11
    1122019-09-23  Mark Lam  <mark.lam@apple.com>
    213
  • trunk/Source/JavaScriptCore/runtime/JSGlobalObject.cpp

    r250025 r250264  
    599599            init.setStructure(JS ## type ## Array::createStructure(init.vm, init.global, init.prototype)); \
    600600            init.setConstructor(JS ## type ## ArrayConstructor::create(init.vm, init.global, JS ## type ## ArrayConstructor::createStructure(init.vm, init.global, init.global->m_typedArraySuperConstructor.get(init.global)), init.prototype, #type "Array"_s, typedArrayConstructorAllocate ## type ## ArrayCodeGenerator(init.vm))); \
    601             init.global->putDirectWithoutTransition(init.vm, init.vm.propertyNames->builtinNames().type ## ArrayPrivateName(), init.constructor, static_cast<unsigned>(PropertyAttribute::DontEnum)); \
     601            init.global->putDirect(init.vm, init.vm.propertyNames->builtinNames().type ## ArrayPrivateName(), init.constructor, static_cast<unsigned>(PropertyAttribute::DontEnum)); \
    602602        });
    603603    FOR_EACH_TYPED_ARRAY_TYPE_EXCLUDING_DATA_VIEW(INIT_TYPED_ARRAY_LATER)
Note: See TracChangeset for help on using the changeset viewer.